Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/0a5bbf6422614515017ba6a1a55ab83a04632652.roa
File: 0a5bbf6422614515017ba6a1a55ab83a04632652.roa (raw, json)
Hash identifier: 95fsUHwc37v3TZloYBjZdhyZDtennEz+TyLbGvJDw90=
Subject key identifier: F9:24:A0:29:15:7A:36:04:FA:83:55:C5:4F:1D:ED:05:C8:EE:4B:4F
Certificate issuer: /CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Certificate serial: 1148EA
Authority key identifier: C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/0a5bbf6422614515017ba6a1a55ab83a04632652.roa
Signing time: Wed 02 Feb 2022 13:53:18 +0000
ROA not before: Wed 02 Feb 2022 03:00:00 +0000
ROA not after: Fri 02 Feb 2024 03:00:00 +0000
asID: 269923
IP address blocks: 200.115.120.0/24 maxlen: 24
200.115.121.0/24 maxlen: 24
200.115.122.0/24 maxlen: 24
200.115.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132778 (0x1148ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Validity
Not Before: Feb 2 03:00:00 2022 GMT
Not After : Feb 2 03:00:00 2024 GMT
Subject: CN=0a5bbf6422614515017ba6a1a55ab83a04632652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:71:7f:bd:6e:b7:5f:cb:0a:47:0f:8b:c2:
6a:54:36:c4:d1:c1:ca:60:39:d7:26:e2:86:ac:8a:
ce:3d:17:3e:8e:1e:31:19:00:8c:4f:db:e0:c4:e9:
74:d5:51:70:b2:c7:cc:f3:70:75:db:69:25:48:b7:
9c:22:80:de:f2:27:20:fc:a3:8c:d1:6d:7e:8e:a5:
37:59:09:23:61:6f:af:20:b2:29:cb:b0:76:40:f8:
a0:35:8b:93:7a:49:53:f2:27:b8:73:27:43:12:0f:
1f:22:32:2e:1b:21:6d:2f:d2:e2:22:3f:34:41:d2:
1a:a3:72:11:0e:aa:a6:f2:75:e0:e0:72:1d:07:2f:
3e:d1:bd:ce:8f:48:23:ce:b8:f1:f0:26:68:e3:2a:
e9:39:28:43:9a:48:dd:3a:f9:c2:9b:85:cb:1b:12:
35:ef:26:dd:db:ac:03:55:4c:dd:cd:e6:02:ec:f3:
33:94:d7:38:16:b2:1a:68:ed:40:85:22:35:49:90:
5c:a4:a7:6c:e7:a9:9e:82:75:40:86:32:d6:39:1f:
53:33:de:bb:73:e6:90:31:b6:18:03:f4:3c:6d:37:
98:f4:27:fa:5f:cf:d1:e6:84:33:0a:5e:80:76:af:
d2:35:16:1b:b0:bb:86:a8:1e:e5:07:78:c0:34:0a:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:A0:29:15:7A:36:04:FA:83:55:C5:4F:1D:ED:05:C8:EE:4B:4F
X509v3 Authority Key Identifier:
keyid:C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/0a5bbf6422614515017ba6a1a55ab83a04632652.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:67:52:01:2b:01:97:b6:18:95:88:64:6b:54:c7:b2:d8:f0:
6f:1e:29:18:39:5b:a6:e6:c5:42:12:d8:f0:dc:cc:63:29:60:
58:fc:e3:5b:d4:9c:63:de:38:3b:7c:c8:3b:6b:d2:f9:6c:cb:
aa:49:eb:88:0c:53:3e:8a:18:c7:e5:0f:46:d9:9b:76:af:96:
77:26:72:07:1a:c8:27:73:94:9c:b3:c0:1b:a8:b2:a6:df:37:
96:7e:3f:7d:12:ef:1b:34:52:0d:ff:f9:72:71:02:b9:0c:40:
ef:1f:4b:21:60:21:fa:3c:bb:fe:1f:82:97:19:9e:dd:70:a7:
b7:21:b2:3f:9d:f4:bd:2f:85:f5:6d:9d:15:fe:8e:eb:2a:64:
99:64:a2:bc:1c:33:18:3c:96:b9:a8:96:80:19:a0:87:88:36:
68:bb:bd:72:85:8c:94:e3:38:e5:a1:d2:83:c7:71:77:aa:5b:
fb:a5:51:d6:49:07:27:5f:38:bf:48:d3:b3:eb:7c:e2:da:e9:
67:3f:18:46:19:23:0a:dd:0b:ac:a9:b3:5e:01:50:0e:7b:e8:
01:d6:98:06:99:da:1a:f9:68:4f:13:2f:17:07:8a:7d:94:39:
b9:46:73:b8:ba:b0:65:81:a3:7e:9a:51:0b:1c:57:54:ae:ea:
c1:9d:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org